diff --git a/deployment/haproxy/haproxy-pacemaker-puppet.yaml b/deployment/haproxy/haproxy-pacemaker-puppet.yaml
index 51bb91e5ac..bf8415ff4e 100644
--- a/deployment/haproxy/haproxy-pacemaker-puppet.yaml
+++ b/deployment/haproxy/haproxy-pacemaker-puppet.yaml
@@ -153,13 +153,13 @@ outputs:
               list_concat:
               - if:
                 - public_tls_enabled
-                - - get_param: HAProxyInternalTLSKeysDirectory
-                  - get_param: HAProxyInternalTLSCertsDirectory
-                  - get_param: DeployedSSLCertificatePath
+                - - get_param: DeployedSSLCertificatePath
                 - null
               - if:
                 - internal_tls_enabled
                 - - get_param: InternalTLSCAFile
+                  - get_param: HAProxyInternalTLSKeysDirectory
+                  - get_param: HAProxyInternalTLSCertsDirectory
                 - null
             tripleo::profile::pacemaker::haproxy_bundle::internal_certs_directory: {get_param: HAProxyInternalTLSCertsDirectory}
             tripleo::profile::pacemaker::haproxy_bundle::internal_keys_directory: {get_param: HAProxyInternalTLSKeysDirectory}